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AMENDMENTS TO THE CLAIMS: 

This listing of the claims will replace all prior versions, and listings, of the claims in this 
application: 

Listing of Claims: 

1 . (Original) A method for authenticating a client over a network, comprising: generating a first 
certificate; sending the first certificate to a server, wherein the server is configured to store the 
first certificate; requesting a second certificate if authentication over the network is requested; 
sending the second certificate to the server over the network; comparing the second certificate to 
the first certificate at the server, and if the second certificate and the first certificate are 
substantially the same, authenticating the client. 

2. (Original) The method of claim 1, wherein the server is further configured to generate the first 
certificate. 

3. (Original) The method of claim 1, wherein sending the first certificate further comprises using 
a trusted mechanism selected from at least one of a manual entry of certificate, a secure channel, 
and a private channel. 

4. (Original) The method of claim 3, wherein the trusted mechanism further comprises at least 
one of the client authenticating to the server, and the client proving ownership of the certificate to 
the server. 

5. (Original) The method of claim 1, wherein the client is further configured to generate the first 
certificate. 

6. (Original) The method of claim 1, wherein a third party Certificate Authority (CA) is 
configured to generate the first certificate. 
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7. (Original) A method for authenticating a client over a network, comprising: receiving a 
certificate from the client over a trusted mechanism; storing the certificate at a server; requesting 
another certificate if authentication is requested; comparing the other certificate to the stored 
certificate, and if the other certificate and the stored certificate are substantially the same, 
authenticating the client. 

8. (Original) The method of claim 7, wherein the trusted mechanism further comprises at least 
one of a manual entry of certificate, a secure channel, and a private channel. 

9. (Original) The method of claim 8, wherein the trusted mechanism further comprises at least 
one of the client authenticating to the server, and the client proving ownership of the certificate to 
the server. 

10. (Original) The method of claim 7, wherein the server is further configured to store and to 
compare the certificate. 

1 1 . (Original) The method of claim 7, wherein the certificate is stored in at least one of a hard 
disk, a tape disk, and a mass storage device. 

12. (Currently Amended) A method for authenticating a network device over a network, 
comprising: generating a certificate; sending the certificate to an other network device, wherein 
the other network device enables storage of the certificate; resending the certificate to the other 
network device; comparing the resent certificate to the stored certificate: and if the resent * 
certificate and the stored certificate are determined to be substantially the same, receiving 
authentication. 

13. (Original) The method of claim 12, wherein generating the certificate is performed by the 
other network device. 



14. (Original) The method of claim 12, wherein the network device is configured to generate the 
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first certificate. 

15. (Original) The method of claim 12, wherein a third party Certificate Authority (CA) is 
configured to generate the first certificate. 

16. (Original) An apparatus for authenticating a client over a network, comprising: a first 
component configured to receive a first certificate and a second certificate; and a second 
component, coupled to the first component, that is configured to perform actions including: 
determining if the first certificate and the second certificate are substantially the same; and if it is 
determined that the first certificate and the second certificate are substantially the same, 
authenticating the client associated with the first certificate and the second certificate. 

17. (Original) The apparatus of claim 16, wherein the apparatus operates as at least one of a 
server, a gateway, and a server array. 

18. (Original) The apparatus of claim 16, wherein the first component is further configured to 
store the first certificate. 

19. (Original) The apparatus of claim 16 further comprising a third component, coupled to the 
first component, and configured to generate the first certificate based, in part, on information 
provided by the client. 

20. (Currently Amended) An apparatus for receiving authentication over a network, comprising: 
a first component configured to generate a certificate; a second component, coupled to the first 
component, configured to send the certificate to a server; and a third component, coupled to the 
second component, configured to resend the certificate to the server over the network, wherein 
resending the certificate enables the server to authenticate a client based, in part, on a comparison 
of the sent certificate and the resent certificate to determine if the sent certificate and the resent 
certificate are substantially the same . 
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21. (Original) The apparatus of claim 20, wherein the apparatus operates as at least one of a 
client, a portable computer, and a personal digital assistant. 

22. (Original) The apparatus of claim 20, wherein the certificate is sent to the server using a 
trusted mechanism selected from at least one of a manual entry of certificate, a secure channel, 
and a private channel. 

23. (Original) The apparatus of claim 22, wherein the trusted mechanism further comprises at 
least one of the client authenticating to the server, and the client proving ownership of the 
certificate to the server. 

24. (Original) A system for authenticating a client over a network, comprising: a client, 
configured to perform actions, comprising: generating a first certificate; sending the first 
certificate to a server to be stored; and sending a second certificate if authentication over the 
network is requested; and a server, in communication with the client, configured to perform 
actions, comprising: storing the first certificate at the server if the first certificate is received for a 
first time; comparing the second certificate to the first certificate; and authenticating the client 
over the network, if the first certificate and the second certificate are substantially the same. 

25. (Original) The system of claim 24, wherein authenticating the client over the network further 
comprises establishing a secure session. 

26. (Original) A system for authenticating a client over a network, comprising: a client, further 
comprising: means for generating a first certificate; means for sending the first certificate to a 
server to be stored; and means for sending a second certificate if authentication over the network 
is requested; and a server, in communication with the client, further comprising: means for 
storing the first certificate at the server if the first certificate is received for the first time; means 
for comparing the second certificate to the first certificate; and means for authenticating the 
client, if the first certificate and the second certificate are substantially the same. 
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27. (Original) The system of claim 26, wherein the means for storing comprises at least one of a 
hard disk, a tape disk, and a mass storage device. 
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